Salesforce.com employee phished; customers spearphished

Source: The Register

A Salesforce.com employee fell fictim to a phishing attack, which resulted in compromise of customer data through his account. This, in turn, was used to conduct spearphishing attacks against certain customers. Since then, the same data has been used to send targeted email with malware-laden attachments.